Laravel Cloud

Manage Laravel Cloud infrastructure via API — apps, environments, deployments, databases, caches, domains, scaling, commands, storage, and WebSockets.

Security Scan

The skill's code, instructions, and required token align with its stated purpose (a bash wrapper for the Laravel Cloud REST API); nothing disproportionate or unexpected is requested or installed.

Purpose & Capability

Name/description describe a Laravel Cloud API wrapper and the skill only requires curl, jq, and a Laravel Cloud API token. The provided bash script implements API calls to cloud.laravel.com and exposes the resources/actions listed in the README — this is coherent with the stated purpose.

Instruction Scope

SKILL.md instructs the agent to use an API token or a credentials file located under ~/.openclaw/credentials/laravel-cloud/config.json; the script reads exactly that path and the LARAVEL_CLOUD_API_TOKEN env var. The script only constructs HTTP requests to the Laravel Cloud API. Note: the skill includes actions that run remote commands (e.g., 'commands run' to execute artisan on an environment) and can change environment variables/deployments — this is expected for an infra management tool but is powerful on the target infrastructure.

Install Mechanism

There is no install spec; the skill is instruction + a local bash script. No downloads from remote URLs or package installers are used. This minimal approach reduces install-time risk.

Credentials

Only LARAVEL_CLOUD_API_TOKEN is required (and an optional local credentials file). No unrelated credentials, system-wide config paths, or other secrets are requested. The script optionally supports resolving op:// 1Password references if the 'op' binary is present, but it does not require 'op' to be installed.

Persistence & Privilege

always:false (default) and the skill does not request persistent system-wide privileges or modify other skills' configs. It only reads/stores credentials in its own declared credentials path.

Assessment

This skill appears to do exactly what it says: it's a bash CLI wrapper that calls the Laravel Cloud REST API. Before installing, be aware that the provided API token grants full API access to your Laravel Cloud account (ability to change env vars, trigger deployments, run commands, create/delete resources). Only supply a token with the minimum required scope, store it securely, and consider rotating/revoking the token after use. Verify you trust the skill author/source (the package comes with a script file — review it locally). Note: the script will attempt to resolve op:// 1Password references if the 'op' CLI is present, but 'op' is not required; this is optional convenience, not malicious. If you need stricter controls, create a limited-scope API token in Laravel Cloud rather than using an account-wide token.

Laravel Cloud API Skill

Wraps the entire Laravel Cloud REST API in a single bash script.

Setup

Option 1 — Environment variable (preferred):

export LARAVEL_CLOUD_API_TOKEN="your-token-here"

Option 2 — Credentials file:

mkdir -p ~/.openclaw/credentials/laravel-cloud
echo '{"token":"your-token-here"}' > ~/.openclaw/credentials/laravel-cloud/config.json

Generate your token at: cloud.laravel.com → Settings → API Tokens

Usage

laravel-cloud <resource> <action> [args...]

Quick Reference

Resource	Actions
apps	list, get, create, update, delete
envs	list, get, create, update, delete, start, stop, metrics, logs, vars-add, vars-replace
commands	list, get, run
deployments	list, get, initiate
domains	list, get, create, update, delete, verify
instances	list, get, sizes, create, update, delete
bg-processes	list, get, create, update, delete
databases	clusters, cluster, cluster-create, cluster-update, cluster-delete, cluster-metrics, types, list, get, create, delete, snapshots, snapshot, snapshot-create, snapshot-delete, restore, dedicated
caches	list, get, types, create, update, delete, metrics
buckets	list, get, create, update, delete
bucket-keys	list, get, create, update, delete
websockets	list, get, create, update, delete, metrics
ws-apps	list, get, create, update, delete, metrics
ips	list
org	get
regions	list

Common Examples

# List all applications
laravel-cloud apps list

# Create an application (requires --repository)
laravel-cloud apps create --name "my-app" --region us-east-1 --repository owner/repo

# List environments for an app
laravel-cloud envs list <app-id>

# Create an environment
laravel-cloud envs create <app-id> --name "Production" --branch main

# Start / stop an environment
laravel-cloud envs start <env-id>
laravel-cloud envs stop <env-id>

# View environment metrics and logs
laravel-cloud envs metrics <env-id> --period 24h
laravel-cloud envs logs <env-id>

# Set environment variables
laravel-cloud envs vars-add <env-id> --vars 'APP_KEY=base64:...,DB_HOST=localhost'
laravel-cloud envs vars-replace <env-id> --vars 'KEY1=val1,KEY2=val2'

# Trigger a deployment
laravel-cloud deployments initiate <env-id>

# Run an Artisan command
laravel-cloud commands run <env-id> --command "php artisan migrate --force"

# Get organization and regions
laravel-cloud org get
laravel-cloud regions list

# Manage databases
# NOTE: Creating a cluster auto-creates a "main" database (schema).
# Use that default — don't create an extra one. Wire the "main" schema
# to your environment via: envs update <env-id> --database-schema-id <main-schema-id>
# To find the schema ID: databases cluster <cluster-id> (with ?include=schemas)
laravel-cloud databases clusters
# DB types: laravel_mysql_84, laravel_mysql_8, neon_serverless_postgres_16/17/18, aws_rds_mysql_8, aws_rds_postgres_18
laravel-cloud databases cluster-create --name my-db --type laravel_mysql_84 --region us-east-1 --size db-flex.m-1vcpu-512mb --storage 5

# Manage caches
laravel-cloud caches list
# Cache types: upstash_redis (sizes: 250mb, 1gb, ...) or laravel_valkey (sizes: valkey-pro.250mb, ...)
laravel-cloud caches create --name my-cache --type laravel_valkey --region us-east-1 --size valkey-pro.250mb

# Object storage
laravel-cloud buckets list
laravel-cloud buckets create --name my-bucket --region us-east-1

# WebSocket clusters
laravel-cloud websockets list
laravel-cloud ws-apps list <ws-cluster-id>

# Per-resource help
laravel-cloud help
laravel-cloud envs help
laravel-cloud databases help

Dependencies

• curl — HTTP requests
• jq — JSON parsing and pretty-printing